•Use the Search field on Cisco.com to locate Cisco IOS software documentation. For example, if you want information about software activation, you can enter Cisco Software Activation Tasks and Commands in the search field.

Software Activation

Catalyst 3750-E and 3560-E switches run the universal software image that has the Cisco IOS code for multiple feature sets. To enable a specific feature set, you must use the software activation feature to install the software license for that feature set. With software activation, you can

•Generate a software license.

•Install the software license on your switch.

•Enable a feature set.

•Upgrade a feature set.

Beginning with Cisco IOS Release 12.2(46)SE, the switches support these features:

•Temporary software licenses

•Rehosting a software license

•Cisco License Call Home

Note Catalyst 3750 and 3560 switches run feature-specific software releases and do not support software activation.

Catalyst 3750-E and 3560-E switches support either the noncryptographic or the cryptographic universal software image.

Note To connect your management station or PC to the Cisco Product License Registration Portal, use a file transfer protocol such as the Xmodem Protocol or TFTP.

If you are connecting your PC to the Cisco License Manager server, you do not need to use one of these protocols.

Feature Sets

Catalyst 3750-E and 3560-E switches support these feature sets:

•IP base

•IP services

The software licenses are not affected by Cisco IOS software upgrades.

Catalyst 3750-E and 3560-E switches are backward-compatible with Catalyst 3750 and 3560 switches. For detailed information about the feature compatibility between the switches, see the "Feature Compatibility" section.

The permanent license is node-locked because it is bound to the unique device identifier (UDI) of the switch and can only be used on that switch. When you order a new switch, the switch has the permanent software license that you selected.

A temporary software license is limited to a usage period and can be one of these types:

•Embedded evaluation license in the software image

The evaluation license is node-locked and is valid for 60 days.

You can use this license to minimize network downtime if a switch fails and the replacement switch does not have the same software license. You can also use the license to evaluate a feature set on the switch.

•Extension license

You can get this license from Cisco TAC. It is node-locked and is valid for 60 days.

•Grace-period license

During the rehost process, when the license on a switch is revoked and transferred to another switch, this license is automatically installed to prevent network disruption. It is valid for 60 days.

After the usage period expires, the switch continues to use the temporary software license until it is restarted. Before it restarts, warning messages state the switch is running the feature set without a valid license. After the switch restarts, the switch uses a valid software license based on the previously described hierarchy. If the switch does not have a valid license, it uses the IP base software license. For examples of using a temporary license, see the "Changing the Software License on the Switch" section.

For more information about software licenses, see the Cisco Software Activation Conceptual Overview feature module at this URL:

Getting Software Licenses

Use one of these methods to get a software license:

•When ordering a switch, specify the software image and feature set to be installed.

•If you want your switch to run a different feature set, purchase the software license for that feature set, and get a product activation key (PAK). Use one of these processes to install the software license:

Step 4 Use the PAK and the switch UDI to create a software license file.

Step 5 The software license file is e-mailed to you.

Cisco License Manager

With Cisco License Manager, you can perform these tasks from one application:

•Automatically discover software licenses on your switches

•Install software licenses

•Track the software license status in your network

Use the Cisco License Manager GUI to perform all of these licensing tasks. You can also use the Cisco License Manager application programming interface (API) to write programs for your specific licensing tasks.

Cisco License Call Home

The Cisco License Call Home feature supports these tasks only on a switch running the cryptographic universal software license:

•Installing the software license

•Rehosting the license

•Requesting that the software license be remailed

You can use CLI commands to connect the switch to the Cisco licensing infrastructure. For more information on the License Call Home feature and the Cisco licensing process, see the Cisco Software Activation Tasks and Command feature module on Cisco.com.

For more information about the License Call Home feature and about transferring software licenses, see the Cisco Software Activation Conceptual Overview feature module on Cisco.com.

For information about the License Call Home interface, see the Cisco Software Activation Tasks and Commands feature module on Cisco.com.

Installing Software Licenses by Using the Cisco License Manager

Use Cisco License Manager to install and manage software licenses on the switch.

Follow these guidelines when using Cisco License Manager:

•Cisco License Manager only runs on a server with Windows XP.

•Firewalls are not allowed between the Cisco License Manager server and a GUI client.

•For device notification to be successful, ensure that the Cisco License Manager hostname exists in the Domain Name Service (DNS) or that the device has the Cisco License Manager hostname and IP address configured to receive messages.

•Configure your switch to allow Cisco License Manager to manage software licenses by using the ip http server privileged EXEC command and the license agent default authenticate none global configuration command. For a summary of these commands, see the Getting Started with Cisco License Manager on Windows XP guide. For detailed instructions about enabling Cisco License Agent on your device, see the Cisco License Agent documentation.

•Make sure that there is a valid connection from the Cisco License Manager server to Cisco.com.

For additional requirements and guidelines, see the Getting Started with Cisco License Manager for Windows XP guide on Cisco.com.

Installing Software Licenses Using Cisco License Call Home

Beginning in privileged EXEC mode, follow these steps to install a software license and to restart the switch.

Command

Purpose

Step 1

Access the Cisco Product License Registration Portal.

Make sure that the switch is configured for the Cisco License Call Home feature. For more information, see the Cisco Software Activation Tasks and Commands feature module on Cisco.com.

Step 2

license call-home install pak pak-id [switch switch-num]

Install a software license file on the switch by using the product activation key (PAK).

•pak pak-id—PAK that was e-mailed to you.

•(Optional) switch switch-num—Stack member number. This parameter is supported only on Catalyst 3750-E switches.

Repeat this step when installing more than one software license.

Step 3

configure terminal

Enter global configuration mode.

Step 4

license bootlevellicense-level [switchswitch-num]

(Optional) Enable a software license on the switch:

•levellicense-level—Specify the license level that is ipbase, ipservices, or advipservices.

•(Optional) switchswitch-num—Specify the stack member. This option is available only on Catalyst 3750-E switches.

–Use the credentialurl parameter to save the device credential information and to specify the URL to which the information is saved.

–Use the url parameter to specify the URL of the software image.

•Recovering from a corrupt license:

–Use the Cisco License Call Home feature to request that the software license file be remailed.

–Use the Cisco IOS CLI commands to re-install an uncorrupted version of the license on the switch.

Displaying Software License Information

To display information about the software licenses on your switch, use one of these methods:

•Use Cisco License Manager to view license and device information. In the GUI, the discovery and polling features collect all the license and device information that appears in the Properties window. For detailed instructions, see the Cisco License Manager online help.

In a mixed hardware stack, the show license udi command output shows only the Catalyst 3750-E UDIs because only those member switches support the software activation process. For example, in a mixed hardware stack with a Catalyst 3750 switch as the stack master and a Catalyst 3750-E switch as the stack member, this output appears when you enter the show switch privileged EXEC command on the Catalyst 3750 stack master:

Switch# show switch

Switch/Stack Mac Address : 0012.7f43.b680

H/W Current

Switch# Role Mac Address Priority Version State

----------------------------------------------------------

1 Member 0012.8092.2900 9 1 Ready

*3 Master 0012.7f43.b680 1 0 Ready

When you enter the show license udi command on the Catalyst 3750 stack master, this output appears for all the stack members that support software activation:

If you enter the show license udi switch 3 command on the stack master, this output appears for all of the stack members that support software activation. It is the same as the show license udi command output:

After installing the license for the IP services feature set on the switch, you can enter the show version privileged EXEC command to display the software license information. In this example, the switch is currently running the IP base feature set.

Switch# show version

<output truncated>

License Level: ipbase Type: Permanent

Next reboot license Level: ipservices

<output truncated>

Restart the switch to enable the IP services feature set.

Use the show version command to display the software license information after restarting the switch:

Switch# show version

<output truncated>

License Level: ipservices

License Type: Permanent

Next reboot license Level: ipservices

<output truncated>

Using Cisco License Call Home to Rehost a Software License

This example shows show to revoke a software license from a source switch, Switch 2, and transfer it to a destination switch, Switch 3. Switch 2 and Switch 3 are members of a switch stack.

Before revoking the license from Switch 2, enter the show license udi privileged EXEC command to get the PID and UDI of Switch 3.

After the software license is revoked from Switch 2, the software license file for Switch 3, the destination switch, is e-mailed to you. After you install the software license file on Switch 3, restart it to enable the IP services software license.

Using Cisco License Call Home to Resend a Software License File

This example shows to request that the software license file be remailed from the Cisco Product License Registration Portal to Switch 3.

Switch# license call-home resend flash3:resend.lic switch 3

CCO User name : johndoe

CCO password :

Email address : johndoe@cisco.com

!................

The software license file is e-mailed to you.

Use the dir flash3: command to verify that the software license file is stored in the flash memory.

Switch# dir flash3:

Directory of flash3:/

<output truncated>

22 -rwx 4096 Jun 25 2008 16:11:35 -07:00 resend.lic

57409536 bytes total (9097216 bytes free)

Install the software license file on Switch 3, and restart the switch.

Changing the Software License on the Switch

These are valid rehost and upgrade scenarios:

•If your switch is running the IP base feature set, you cannot rehost the IP base license, but you can upgrade to the IP services feature set by getting the IP services software license. After you restart the switch, it runs the IP services feature set.

•If your switch is running the IP services feature set and you rehost the IP services software license to another switch, the switch continues to run the IP services grace-period license. After the grace-period license expires, messages appear about the switch running the IP services feature set without a valid license. After you restart the switch, the switch runs the IP base feature set.

•If your switch is running the IP base feature set, you can enable the IP services evaluation software license to try the IP services feature set. If you decide to buy the IP services software license, get the upgrade PAK, and install it on the switch. The software license automatically replaces the evaluation license, and the switch continues to run the IP services feature set. You do not need to restart the switch.

Activating Software in Mixed Hardware Stacks

Although the Catalyst 3750 switch does not support software activation, the Catalyst 3750 master in a mixed hardware stack supports the software license administration and management functions.

We recommend that all stack members run Cisco IOS Release 12.2(35)SE or later. The stack members are then fully compatible, and the interface-specific settings of the stack master are saved if the stack master is replaced without saving the running configuration to the startup configuration.

When you upgrade the Catalyst 3750-E universal software image in the stack, all stack members automatically get the copies of the Catalyst 3750-E software image and the Catalyst 3750 feature-specific image. During the upgrade, these actions occur automatically:

•On a Catalyst 3750-E member, the software images are copied to the switch, and the switch enables the appropriate feature set.

•On a Catalyst 3750 member, the software images are copied to the switch, and the switch uses the feature-specific image that corresponds with the enabled feature set on the Catalyst 3750-E member.

Make sure that the Catalyst 3750 members have enough flash memory to store both images. For instance, only Catalyst 3750 switches with 32 MB of flash memory (such as the Catalyst 3750G-48TS switch) have enough. If a member switch does not have enough flash memory, the upgrade process stops, and an error message appears.

When archiving (uploading and downloading) software images in a mixed hardware stack, you can specify multiple software images. For example, to download the two image files from the TFTP server to the switch, enter the archive download-sw/directory tftp://10.1.1.10/ c3750-ipservices-tar.122-35.SE1.tar c3750e-universal-tar.122-35.SE2.tar privileged EXEC command.

For more information about working with software images, see the "Working with Software Images" section in the Catalyst 3750-E and 3750 switch software configuration guides and the archive commands in the Catalyst 3750-E and 3750 switch command references.

Feature Compatibility

Unless otherwise noted, the features on Catalyst 3750-E, 3750, 3560-E, and 3560 switches are the same except for the information in this section.

Only the Catalyst 3750-E and 3560-E switches support these features:

•Power monitoring and power policing on Power over Ethernet (PoE) ports

•On-board failure logging (OBFL)

•Ethernet management ports

•Support for universal software images and the software activation feature.

The switch stores the MAC addresses of the bridge group and of the VLAN associated with the SVI as two separate entries in the bridge-group MAC address table.

When fallback bridging is enabled, the switch uses only half of the feature resources allowed by the configured SDM1 template to store MAC addresses.

Because of collisions, the switch might not be able to store a few MAC address table entries even if it has free hardware memory.

The switch stores the MAC address of the bridge group and of the VLAN associated with the SVI as one entry in the bridge-group MAC address table.

When fallback bridging is enabled, the switch can use all of the feature resources allowed by the configured SDM template.

A Catalyst 3750-E member behaves like a Catalyst 3750 member.

HSRP

The switch supports up to 32 unique HSRP groups.

When you specify the same group number for multiple VLANs or router interfaces, the switch creates one hardware entry per HSRP group number.

The switch supports up to 32 HSRP groups regardless of the group number.

When you specify the same group number for multiple VLANs or router interfaces, the switch creates a hardware entry for each VLAN or interface. Some HSRP groups might have the same group number associated with different VLANs or router interfaces.

A Catalyst 3750-E member behaves like a Catalyst 3750 member. If the Catalyst 3750-E member has an HSRP configuration that the Catalyst 3750 member does not support, the stack discards the HSRP configuration.

If you add a Catalyst 3750 switch as a member in a Catalyst 3750-E-only stack, the switch enters mismatch mode.

IGMP

A multicast packet is unmatched when the destination IPv4 address does not match the destination MAC address. The unmatched multicast packet is forwarded in hardware.

The unmatched multicast packet is forwarded in software, which might cause high CPU utilization.

If a Catalyst 3750 member receives an unmatched multicast packet, the switch forwards the packet in software.

If a Catalyst 3750-E member receives an unmatched multicast packet, the switch forwards the packet in hardware.

IP multicast routing

A multicast packet is unmatched when the destination IPv4 address does not match the destination MAC address. The unmatched multicast packet is forwarded in hardware.

The unmatched multicast packet is forwarded in software, which might cause high CPU utilization.

If a Catalyst 3750 member receives an unmatched multicast packet, the switch forwards the packet in software.

If a Catalyst 3750-E member receives an unmatched multicast packet, the switch forwards the packet in hardware.

You can configure the PIM2 version and enable the PIM mode on the Layer 3 interface on which multicast routing is enabled.

When an IPv4 SDM template is enabled, the switch supports up to 64 PIM-enabled interfaces in hardware. When a dual IPv4 and IPv6 template is enabled, the switch supports up to 32 PIM-enabled interfaces in hardware.

For all SDM templates, the switch supports up to 128 PIM-enabled interfaces in hardware based on the TCAM3.

—

IP unicast routing

On the switch or in a Catalyst-3750-E-only stack, you can configure 20 private VLANs and 105 PBR4 policies regardless of the number of configured VRFs5 (up to 26 VRFs).

You can enable VRF on a private VLAN and the reverse.

On the switch or in a Catalyst 3750-only stack, these are the maximum numbers of VRFs, private VLANs, and PBR policies that can be configured:

•When no VRFs are configured, you can configure 20 private VLANs and 105 PBR policies.

•When up to 26 VRFs are configured, you can configure 20 private VLANs and 42 PBR policies.

•If more than 42 PBR policies are configured, you cannot configure VRF.

You cannot enable VRF on a private VLAN and the reverse.

The maximum numbers of VRFs, private VLANs, and PBR policies that can be configured on a mixed hardware stack is the same as those for a Catalyst 3750-only stack.

A Catalyst 3750-E member behaves like a Catalyst 3750 member. After the stack restarts:

•The member rejects the VRF configuration when VRF is enabled on a private VLAN.

•If at least one VRF is configured, the member rejects the PBR policy configuration after 42 PBR policies is reached.

The Catalyst 3750 switch goes into feature-mismatch mode when the switch tries to join a Catalyst 3750-E-only stack with one of these configurations:

•Both VRF and private VLANs are enabled.

•The VRF configuration has more than 42 configured policies.

You must remove the stack VRF configuration so that the Catalyst 3750 switch can join the stack. The unsupported VRF configuration cannot be part of the provisioned configuration for the Catalyst 3750 switch.

The switch supports ICMPv4 redirect for routes with mask lengths less than 32 bits. ICMP redirect is not supported for host routes or for summarized routes with mask lengths greater than 32 bits.

—

The switch has no limitations for unicast reverse path forwarding (unicast RPF).

The switch does not support unicast RPF.

You cannot configure unicast RPF on switches in a mixed hardware stack.

IPv6 ACLs

The switch supports the ahp and routing keywords in the deny (IPv6 access-list configuration) and the permit (IPv6 access-list configuration) commands.

If a port or router ACL has ACEs7 with the ahp keyword, the routing keyword, or both, you can perform these tasks:

•On a standalone switch or a Catalyst 3750-E-only stack

–Apply the port ACL to a switch port.

–Apply a router ACL to an SVI.

–Modify the port or router ACL by adding the ahp keyword, the routing keyword, or both.

•On a Catalyst 3750-E-only stack

–When a port ACL is attached to the Catalyst 3750-E member switch port, add a Catalyst 3750 switch as a member if the stack does not have router ACLs configured with the ahp keyword, the routing keyword, or both.

–When the router ACL is attached to an SVI on a member, add a Catalyst 3750-E switch as a member but not a Catalyst 3750 switch as a member.

The switch does not support the ahp and routing keywords in the deny (IPv6 access-list configuration) and the permit (IPv6 access-list configuration) command.

If an ACL has ACEs with the ahp keyword, the routing keyword, or both, these actions occur on a standalone switch or on Catalyst 3750-only stack:

•When you apply a port ACL to a switch port or a router ACL to an SVI, the switch rejects the ACL.

•When you modify the port or router ACL by adding the ahp keyword, the routing keyword, or both to the ACE, the switch rejects the ACE.

If a port or router ACL has ACEs with the ahp keyword, the routing keyword, or both, these actions occur:

•The port ACL can be applied only to a Catalyst 3750-E member switch port.

•The port ACL cannot be applied to any Catalyst 3750 member switch port.

•A router ACL cannot be applied to an SVI on any member switch.

If a router ACL is applied to an SVI and you modify the ACL by adding the ahp keyword, the routing keyword, or both to the ACE, the switch rejects the ACE.

If a port ACL is applied to a Catalyst 3750 member switch port and you modify the ACL by adding the ahp keyword, the routing keyword, or both to the ACE, the switch rejects the ACE.

If a port ACL is applied to a Catalyst 3750-E member switch port and you modify the ACL by adding the ahp keyword, the routing keyword, or both to the ACE, the switch accepts the ACE.

The switch supports IPv6 address-matching for a full range of prefix lengths.

The SSH12 connection to the switch stack can be lost if the Catalyst 3750-E master running the cryptographic software image and the IP base or IP services feature set fails and one of these actions occur:

•The stack master is replaced by a Catalyst 3750-E member running the noncryptographic image and the IP base or IP services feature set.

•The master is replaced by a Catalyst 3750 switch running the noncryptographic image and the IP base or IP services image.

We recommend that a stack master run the cryptographic image and the IP base or IP services feature set.

Switch memory usage

The switch uses hardware memory to store unicast routes, MAC addresses, ACLs, and other feature information and to provide the SDM templates that allocate memory resources, depending on how the switch is used.

Because of collisions, in some cases, the switch cannot store a few MAC address table entries even if it has free hardware memory.

The switch uses TCAM to store unicast routes, MAC addresses, ACLs, and other feature information and to provide the SDM templates that allocate memory resources, depending on how the switch is used.

—

System MTU

You can configure the system jumbo MTU and the system routing MTU values on the switch ports.

The switch allows multicast routing of jumbo frames.

You can configure the system MTU, the system jumbo MTU, and the system routing MTU values on the switch ports.

For information about configuring the system MTU values on stack members, see the "Configuring the System MTU" section in the Catalyst 3750-E and 3560-E Switch Software Configuration Guide.

Configuration Guidelines in Mixed Hardware Switch Stacks

This document describes the interactions of Catalyst 3750-E and 3750 members in a mixed hardware switch stack. For more information about switch stacks, see the Catalyst 3750-E and 3560-E Switch Software Configuration Guide and the Catalyst 3750 Switch Software Configuration Guide on Cisco.com.

Follow these guidelines when configuring mixed hardware stacks:

•We recommend that a Catalyst 3750-E switch be the stack master.

•We recommend that all stack members run Cisco IOS Release 12.2(35)SE or later to ensure compatibility between the stack members. For more information, see these sections in the "Managing Switch Stacks" chapter in the Catalyst 3750-E and 3750 software configuration guides:

–"Switch Stack Software Compatibility Requirements" section

–"Stack Protocol Version Compatibility" section

–"Major Version Number Compatibility Among Switches" section

–"Minor Version Number Compatibility Among Switches" section

The stack members in a mixed software stack use the automatic upgrade (auto-upgrade) and the automatic advise (auto-advise) processes to detect mismatched software and to try to upgrade a member in version-mismatch (VM) mode.

•We recommend assigning the highest priority value to the switch that you prefer to be the stack master. This ensures that the switch is re-elected as stack master if a re-election occurs. In a mixed hardware stack, assign the highest priority value to a Catalyst 3750-E switch.

–All stack members use the SDM template configured on the stack master. In a mixed hardware stack:

Only the switches using the same desktop SDM template as the stack master can be stack members. All other switches trying to join this switch stack enter SDM-mismatch mode.

If a Catalyst 3750 stack master is using an aggregator template, Catalyst 3750-E switches cannot be stack members. Only Catalyst 3750 aggregator switches can be stack members.

•You can connect to the stack master by using one of these methods:

–You can connect a terminal or PC to the stack master through the console ports of one or more stack members.

–You can connect a PC to the stack master through the Ethernet management ports of one or more Catalyst 3750-E stack members. If the stack master is a Catalyst 3750 switch and at least one stack member is a Catalyst 3750-E switch, you can manage the stack through the PC.

Related Publications

These documents provide complete information about the switches and are available from this Cisco.com site:

Note Before installing, configuring, or upgrading a switch, see these documents:

•For initial configuration information, see the "Using Express Setup" section in the getting started guide or the "Configuring the Switch with the CLI-Based Setup Program" appendix in the hardware installation guide.

•For device manager requirements, see the "System Requirements" section in the release notes (not orderable but available on Cisco.com).

•For Network Assistant requirements, see the Getting Started with Cisco Network Assistant (not orderable but available on Cisco.com).

•For cluster requirements, see the Release Notes for Cisco Network Assistant (not orderable but available on Cisco.com).

•For upgrading information, see the "Downloading Software" section in the release notes.

See these documents for other information about the switch:

•Cisco License Manager

–Getting Started with Cisco License Manager 1.0 on Windows XP

–Cisco License Manager online help

–API Reference Guide for Cisco License Manager on Windows XP

•Catalyst 3750-E and 3560-E switches

–Release Notes for the Catalyst 3750-E and 3560-E Switches

–Catalyst 3750-E and 3560-E Switch Software Configuration Guide

–Catalyst 3750-E and 3560-E Switch Command Reference

–Catalyst 3750-E and 3560-E Switch System Message Guide

–Device manager online help (available on the switch)

–Catalyst 3750-E and 3560-E Switch Hardware Installation Guide

–Getting Started Guide for the Catalyst 3750-E Switch

–Getting Started Guide for the Catalyst 3560-E Switch

–Regulatory Compliance and Safety Information for the Catalyst 3750-E and 3560-E Switches

–For information about the Network Admission Control (NAC) features, see the Network Admission ControlSoftware Configuration Guide

Obtaining Documentation and Submitting a Service Request

For information on obtaining documentation, submitting a service request, and gathering additional information, see the monthly What's New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation, at:

Subscribe to the What's New in Cisco Product Documentation as a Really Simple Syndication (RSS) feed and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free service and Cisco currently supports RSS version 2.0.

Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found at www.cisco.com/go/trademarks. Third party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1005R)

Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.